
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft
File: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft (raw, json)
Hash identifier: QLqd5PcL4Ub8Y+SkOUP93o8/N5od7aJGiWaN7L32alo=
Subject key identifier: BF:76:98:9A:AE:7E:00:8D:43:DD:51:90:3B:8B:2F:33:97:98:D0:75
Authority key identifier: 49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45
Certificate issuer: /CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745
Certificate serial: 4B5987EF6DD91C5AA6396BBAE9D30D3D92D955D2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft
Manifest number: 40
Signing time: Thu 30 Jan 2025 11:21:59 +0000
Manifest this update: Thu 30 Jan 2025 11:16:59 +0000
Manifest next update: Sun 02 Feb 2025 21:32:59 +0000
Files and hashes: 1: 3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa (hash: HSCUNLaKeqcd7Fit+HRGDE0GHJLW2sIkUfc8pivqrjg=)
2: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl (hash: KKjv4F3cfWuNdumj1egXTYmtkLVS7eKZKJXREEkUFJw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:59:87:ef:6d:d9:1c:5a:a6:39:6b:ba:e9:d3:0d:3d:92:d9:55:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745
Validity
Not Before: Jan 30 11:16:59 2025 GMT
Not After : Feb 2 21:32:59 2025 GMT
Subject: CN=BF76989AAE7E008D43DD51903B8B2F339798D075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:99:81:19:b6:59:c7:23:c9:4d:e1:46:a4:17:
38:8a:b7:2e:4d:ab:08:d9:d9:3a:f6:9d:95:4a:ee:
9a:4c:c2:43:a2:7b:5d:77:a0:87:3c:79:68:d5:c1:
47:fa:cf:33:7f:48:ff:3e:7b:34:ad:f7:26:0b:99:
51:2c:69:cc:7c:45:b9:b4:5f:4d:f9:c4:57:0b:55:
0f:4b:bd:6c:f6:be:a4:27:80:ee:b4:50:77:be:6a:
4c:bf:91:2d:b8:89:7e:d4:67:1e:2c:ad:00:6c:6c:
3c:b8:fa:10:41:9b:26:c7:e3:78:71:72:dd:f6:72:
5a:08:06:47:25:25:eb:c0:23:a1:49:e3:84:be:27:
17:9a:0a:37:e1:32:0e:f2:94:2a:0d:ec:72:50:55:
96:a5:f3:8c:80:65:cd:ac:fb:bd:e4:c6:18:40:50:
08:61:bc:d5:5a:4a:cc:13:25:ee:90:50:a9:84:6e:
cc:54:ed:80:1a:de:4d:8e:ec:4a:18:2f:cf:83:dc:
8f:46:ab:08:80:f6:bb:20:8a:94:99:c5:9e:73:58:
cd:b1:df:01:7c:86:14:8b:62:92:61:bf:96:ad:8d:
20:ac:48:ff:51:a2:08:18:e9:40:46:ae:fd:37:17:
35:22:90:aa:20:11:41:ab:21:01:85:36:d4:9f:25:
a5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:76:98:9A:AE:7E:00:8D:43:DD:51:90:3B:8B:2F:33:97:98:D0:75
X509v3 Authority Key Identifier:
keyid:49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c2:29:dd:6d:fb:3a:8d:3e:61:28:56:07:5b:c8:32:84:50:
71:1b:30:5c:a5:f7:22:f9:05:3b:15:d1:d6:27:2f:c3:e4:2a:
7b:7d:b4:7c:69:31:a2:2a:67:e0:5d:8d:ea:ca:ae:c8:b7:99:
5e:72:39:e2:d2:3d:91:7a:5c:f8:af:05:3e:4a:23:56:2a:23:
88:ff:94:e0:6f:fd:9a:e4:9f:67:b2:b5:73:73:37:d4:22:85:
43:e1:b0:2d:f2:8b:5e:41:bc:ea:4b:9c:ee:9c:35:a4:d1:e8:
1e:05:b6:9f:2c:24:86:d1:c5:8f:26:32:6a:b6:4e:6b:a7:99:
10:04:93:05:07:0a:2b:a6:6d:38:14:dc:81:1e:07:14:ea:63:
55:64:e0:39:79:a1:69:29:d9:2b:81:29:92:b0:92:bc:89:b6:
d7:cb:97:b2:0e:7d:ea:94:bb:e6:de:50:c8:cf:c1:13:6c:f8:
d8:27:b6:8a:8f:81:fa:15:0b:04:5d:7f:75:13:7d:72:c8:1c:
83:7f:d5:8f:e2:a3:b4:61:2e:fc:a4:31:53:6a:88:76:65:4d:
47:02:b2:44:5b:11:c9:37:8e:bd:a4:6f:41:0a:0d:46:b0:0f:
44:e5:bf:9b:c6:4a:82:39:c4:04:87:71:65:6f:e8:a8:3c:48:
58:17:54:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:46 2025 by rpki-client